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TOP SECRET- 

MEMORANDUM FOR THE MEMBERS OF USCIB : 

r» 

Subject: Program to Improve Communications Security of NATO 

Countries . 

1. The following documents regarding the Program to Improve the 
Communications Security of NATO Countries have been received from the 
Chairman of the USCIB Ad Hoc Committee handling that program and are for- 
warded for your information: 

a. A report of the USCIB Ad Hoc Committee on the recent 
approach to the French, prepared in compliance with the 
decision of USCIB at its 103rd Meeting. 

b. English text of the Standing Group Memorandum agreed to 
at the technical talks. 

2. A copy of the French text of the Standing Group Memorandum and 
a copy of the report of the U.$. technical delegatee have been filed in 
the office of the Executive Secretary, USCIB, and are available to any 
member who wishes to examine them. 

3. In general, the U.K. report agrees with the conclusions and 
observations of the U.S. technical delegates except that the U.S. dele- 
gates did not encounter the examples of physical insecurity noted in the 
U.K. report. 

4* The Standing Group Memorandum as agreed at the technical talk? 
is substantially the same as that approved by USCIB with the addition of 
an appendix on- general security practices proposed by the French and of a 
provision for issuance of the memorandum through the NATO Council. This 
memorandum has been introduced into the NATO Standing Group. 



/ HXD'J JONES 

Deputy Executive Secretary, USCIB 

Ei closures 
a/s 
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USCXB AO HOC (XHUCTTHK REPORT 
09 TKS OS -UK APPROACH TO THE FRENCH ON •THE SUBJECT 
OF FRENCH AND NATO COMSBC. 

A. general Chronology and gummajgj 1 T March - 1 Hag . 

1. On 17 March US Ambassador Aldrich in London was 
briefed on the project so that he would be In a position to 
deal with the Foreign Office if the need arose for exchanges 
cm this topic. 

2. On 18 March US Ambassador Dillon in Paris received 
Mr. Polyzoidss and resumed preparations for the approach to the 
French. 

3. On 19 March Ambassador Dillon received a full 
briefing on the entire project . . During this conference , it was 
daolded that the program should be reviewed with the British 
Embassy In order to clarify any last-minute problems and In 
order to assure a fully coordinated Joint approaeh to the French 
Foreign Ministry. It was also suggested that Ambassador Dillon, 
meet with British Ambassador Sir Oliver Harvey prior to their 
Joint approach. 

4. On 20 March US Minister Joyce — who was acting in 
place of US Minister Achillea*. and Polys aides met at the British 
Embassy with Minister Patrick Riley and Mr. Richard Owen who 
had been designated as the British delegate to the proposed 
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Tripartite Security Working Group (TSWG) phase of the projected 
operation. The general approach was discussed fully and some 
adjustments were made In a French text which gtxsmarleed the 
English text of the Aide Kemolre and which the British Ambassa- 
dor, Sir Oliver Harvey, proposed to read at the time of the 
joint approach. It was agreed at this meeting that Ambassador 
Dillon would join Sir Oliver at the British Embassy prior to 
their departure for the French Foreign Ministry, that M. 
Alexandre Parodl, Permanent Secretary General of the Ministry 
of Foreign Affairs, was the most suitable person to visit In 
the Ministry, and that every effort would be made to meet 
Pared! as we had initially planned on Monday, 22 March. This 
date was later changed to 24 March. 

5 . On 24 March, the meeting with Parodi took place. 
Immediately after that meeting. Ambassador Dillon described 
the principal results to Mr. Polyzoides, as follows! 

.a. Parodl had given a visible expression of 
awareness of the true meaning of the Aide Memolre 
which Sir Oliver Harvey had read to him in the 
form of the summary in French which had been pre- 
pared at the British Embassy as noted in Paragraph 
4, above. 
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b. parodi’a initial oonaaent was to ask 
whether the operation described In the Aide 
Keraolre was directed mainly toward France. He 
was informed, of course, that such was not the 

i • 

case. 

e. Parodl agreed that the matter was 
serious, that he was in general agreement, that 
he would give it "serious consideration" and that 
he "saw no difficulty in reaching agreement" 
within the terms of the Aide Memoire, 

Zt was learned that the British Ambassador 
had received, in essence, the same impressions. 

6. On 31 March contact was renewed with the Foreign 
Ministry through the British Sabas sy. At that time the French 
promised motion within 48 hours and on Friday evening , 3 April, 
they informed the 03 and British Embassies that a M„ Jean 
Marc Boegner had been named to the TSWO group. Since this 
man was head of the section on NATO matters within the French 
Foreign Ministry, it was quite apparent that our deliberately 
obscure Aide Memoir© had been attractive to the Foreign Minis- 
try primarily in its NATO interpretation. After further 
discussions with Ambassador Dillon, Mr. Achilles and British 
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Minister Riley, It was decided to meet with Boegner and to make 
an effort at that meeting to draw the operation back within the 
planned TSWO format . 

7. On 6 April Minister Achillea, Mr. John C. Elliott 
of the Department of State, British Minister Riley, and Mr, 

Owen of the British Embassy met with M. Boegner and M, 

Christian Auboyneau* of the French Foreign Ministry, The French 
opened this meeting by declaring that they had no specific 
objections to the plan as noted in the Aide Memoirs but that 
for a variety of reasons they felt, in effect, that handling 
the matter through the MATO sections of the Foreign Ministries 
involved seemed desirable. The US -UK representatives countered 
with a full and vigorous exposition of the reasons for choosing 
the TSWO mechanism as the initial' means for developing the 
teohnlcal conference, The French were persuaded to accept this 
view; Boegner withdrew; and Auboyneau and M, Adrian Guillermo 
(also attached to the Secretariat of the Rational Defense 
Ministry) were named to meet with Elliott and Owen in order to 
complete the TSWO phase of the operation. 

coatTc Counselor to the Permanent Secretary 
general of the Ministry of National Defense. 
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8. On 8 April the TSWG group as described in 
the preceding paragraph met formally for the first time. 

Further meetings were held and on IS April this phase of 
the operation was concluded to the satisfaction of the US 
ar<id British members. The technical talks were scheduled 
to begin on SS April at the Xnvalldes. 

9« Meanwhile, Mr. Polyaoides left Paris and 
arrived in London on 13 April where he consulted with 
Messrs. Austin and Raven of NSA. pl 86-36/so use 3605 

10. On 14 April, Major General Ronald C. Penney, 

Chairman of the Cipher Policy Board, was host at an informal 
and very satisfactory conference attended by \ 

/of GCHQ, and Messrs. Austin, Raven and Polyzoides . 

The progress of the Paris operations was described and final 
arrangements were made for the departure of the technical 
conferees . 

11. On 17 April the NSA members proceeded to 

Paris. 

12. On 22 April the technical talks were started 
as scheduled and wera concluded on 1 May. 
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PL 86-36/50 USC 3605 

B. Summary of the Technical Proceedings , 22 April - 1 May , 

1. The American representatives met with the 

British representatives, | ~ 

in London from 12-15 April to smooth out differences in the 
minimum standards paper and to prepare detailed procedure 
for the meetings with the French. These meetings were 
successful. 

2. Ten meetings with the French were held from 
22 April to 1 May in Paris. The four French representatives 
weres 



Mr. Viala - Head of Foreign Office Department 
of "Transmission et Chlffre" 

Capt. Muller - Head of "Service Technique 

Central des Chiffrea” the 
permanent secretariat of the 
Intermlnlaterlal Commission 
on Cipher 



Capltalne de Corvette Rault - Ministry of 

Defense eo 3.3(h)(2) 

PL 86-36/50 USC 3605 

In addition, Lt. Colonel Amaud of the French Army 
and an assistant were present at one meeting. 

3. The ostensible purpose of the talks, the 

preparation of a memorandum for the Standing Group to issue 
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in order to correct poor practices in the national communi- 
cations of NATO nations, was quickly and quite easily accomp- 
lished. The memorandum, which was prepared in final French 
and English texts, is addressed to the NATO Counoil, with 
the request that it he forwarded to the nations. The French 
proposed an acceptable addition, an appendix concerning general 
physical security as applied to cryptographic operations and the 
handling of message texts. It was agreed that SEC AN would 
inform the French and British of the results of the Standing 
Group memorandum, and also that subsequent events might require 
another meeting. Significant in the discussions of the Standing 
Group memorandum was the obvious indication that Muller intends 
to use the memorandum to strengthen his own position and that 
of the Interrainisterial Commission in the control of French 
COMSEC. 
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in considerable discussion particularly on the Hagelin B211, 
the latest model of which was demonstrated. 

5c It is felt that the UK/tJS delegates got through 
to the French on the need for Improvement* This was made evi- 
dent in a private session which Mr. Austin had with Mr. Vlala 
and Capt. Muller, called by Mr. Viala to discuss the A3 AM 2-1 
which Austin had demonstrated to him in Washington. At the 
close of the discussion Vlala made a short speech, slightly 
emotional, of thanks and appreciation and ended by saying 
(these are his exact words as nearly as can be remembered) 

"Be assured that we believe and understand everything that 
you told us and also what you did not tell us. This is a 
delicate business, but believe that we do understand." This 
remark was repeated more or leas by Muller. Then, when Muller 
had left the room, Vlala told Austin, "I have only been in this 
Job for a short time, but already X have found much that is bed. 
Believe me that X have been doing everything that I can, and now 
I will renew my efforts." 

6. The U.S. representatives in addition, as authorized, 
revealed the principles of the AF3AM-7 to the French. There was 
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also some discussion of the AS AM 2-1 and its modification. 

Vial a brought up* with some slight reluctance, and after 
some urging, the French request to the U.S, for aid. A 
British offer of possible help was politely received but 
not discussed in any detail. 

7. It is possible to draw these conclusions s 

a. A better group of Frenoh could not have 
been found. Amongst them they had the technical ability, the 
administrative positions, and the sincere desire to improve 
security that were necessary to the success of the talks. 

b. The main purpose of the talks were achieved. 
It will be some time before it is known whether improvements 
in French COMSEC will actually result, but there is little 
doubt that a sincere attempt will be made. 

c. The Frenoh are, up to a point, technically 
competent and knowledgeable in the field of COMSEC „ They 
appear to have only a naive concept of the capabilities of 
machine analysis; other than this they are good. 

d. They are handicapped by the lack of a 
centralised organization to deal with COMSEC matters; and 
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by the laok of the authority necessary to lnforoe such regu- 
lations as they promulgate. The regulations themselves are 
good. 

e* They are also handicapped by a laok of 
knowledge as to how their systems are actually being used, 
and abused, in the field. Time and again they insisted they 
would not tolerate certain usages which are nevertheless known 
to be current. 

f . The relationships among the various French 
departments engaged in COMSEC work, while cordial, are not 
at all intimate or even candid. 

go Although not discussed, renewed requests 
for material aid are to be expected. 
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MEMORANDUM FROM THE STANDING GROUP TO THE NATO COUNCIL 

1. Regulations at present in force (DC 2/7 (Final) and STAND 474 as 
amended by STASECS 1508, 1535 and 1588) ensure that all CCMSEC telegrams 
and all NATO TOP SECRET and SECRET telegrams, whether they are national 
or international, are en cyphered in cryptosystems authorized by the 
Standing Group. But all nations of NATO are also originating and trans- 
mitting in their own national cryptosystems a quantity of telegrams both 
civil and military which, although they are the private concern of the 
nation in question, must be expected to contain information which affects 
NATO as a whole and the loss of which to a non-NATO nation harms the 
security of NATO. 

2. Further STAND 474 allows NATO telegrams graded CONFIDENTIAL or 
RESTRICTED to be encrypted in national systems, and it is highly unde- 
sirable that information of such grading should became available to na- 
tions outside NATO. 

3. The Standing Group therefore feels considerable concern at the po- 
tential danger to the security of NATO which may arise from the insecu- 
rity of the national communications of individual nations: the insecuri- 
ty of one can endanger the security of all. 

4. The Standing Group haB had prepared two papers, one of which enume- 
rate examples of cryptographic and communications practices and procedures 
which endanger security, and the other, general security considerations. 
These papers are attached as appendices A and B. The Standing Group 
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urges the NATO Council to request each member nation to examine these 
papers and take action to ensure that its ovn communications are free from 
the practices and procedures mentioned in appendix A , and that the 
principles of appendix B are applied. 

5. Further the Standing Group urges that each NATO nation be reques- 
ted to designate or establish a Communications Security Agency which 
shall be authorized to communicate on communication security matters both 
civil and military direct with the Standing Group Communications Security 
and Evaluation Agency Washington (SECAN). 

6. The Standing Group also urges the NATO Council to invite any mem- 
ber nation, which requires advice and technical assistance towards the 
improvement of the security of its national cryptographic and communications 
practices and procedures whether civil or military to apply through 

their Communications Security Agency direct to the Standing Group 
Communications Security and Evaluation Agency Washington. It may subse- 
quently be found more convenient that SECAN arrange for discussions 
arising out of this first approach to be held with appropriate authorities 
in Europe. 
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APPENDIX A 

LIST CF EXAMPLES CF DANGEROUS CRYPTOGRAPHIC AND 
COMMUNICATIONS PRACTICES AMD PROCEDURES 

I. UNENCIPHERED CODES. 

1. Un enciphered codes are totally inacceptable in diplomatic use 
for transmission of classified information. They are only acceptable 

in special cases for Armed Forces communications when it is not considered 
essential to maintain the security of the information for more than two 
or three days from the introduction of the code. It follows that such 
codes must be changed at very frequent intervals. 

II. ADDITIVE SYSTHiS. 

2. Any additive (or subtractor or minuend) system is dangerous unless 
special precautions are taken in the construction and method of employment 
of the additive itself. Many "special precautions", however, are 
deceptive as to security and may even in themselves create weaknesses. 

3. Encipherment by additive can only be guaranteed to be secure when 
the additive is used on a strictly "one-time" basis. 

4. Ehcipherment by non-one-time additive is highly dangerous, but can 
be acceptable in certain circumstances for limited traffic provided 

that precautions are taken to minimize overlap and to prevent cryptanalysts 
from finding any overlap that may arise. 

5. In general, polyalphabetic substitution systems whether actually 
additive in nature or not, are subject to the same dangers as are additive 
systems . 
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III. NON-ADDITIVE HAND SYSTEMS. 

6. There are many hand systems of encipherment that do not employ 
additive. Very few of these can be guaranteed to be secure, even though 
they may be very complex and apply both substitution and transposition 
to code or plain language. 

IV. MACHINE SYSTEMS. 

7. Machine ciphers vary greatly in the amount of security they afford. 
Failure to observe in every detail proper instructions for operation 

may lead to compromise even with the best machines. Others, such as the 
well-known Hagelin "Cryptoteknik" of the old "C" series (see para 8 below), 
are insecure unless precautions are taken over and above those recommended 
by the manufacturer. Others, again, are basically insecure and should in no 
circumstances be used. 

8. Special attention is drawn to the dangers inherent in the use of 
the Hagelin "Cryptoteknik" machines of the "C" and "CX" series: 

a. Since the encipherment is essentially by additive, it follows 
that if the same or a neighboring message setting is used more than once 
the internal set-up can be recovered on the overlap; a single mistake 

by an operator using a message setting a second time can thus compromise 
the machine set-up. , 

b. Ihe additive generated by the machine is never truly random and 
there are circumstances in which this fact can be used to recover the machine 
setting, even though no message setting is repeated. 

2 
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c. With proper precautions some of these machines can give 
adequate security for a limited amount of traffic, but in view of the 
number of different dangers that can arise in varying conditions of 
use, for which it is impossible to legislate in advance, member nations 
who wish to make use of these machines are especially urged to consult 
SEC AN. 

V. TRANSMISSION SECURITY. 

9* Ciphers, however good individually, are not enough to ensure 
communications security. Transmission techniques and message formats can ' 
in themselves provide valuable intelligence to a traffic analyst. Although 
there are practical limitations, the ideal to be striven for is that the 
traffic neither of any type (e.g., naval, air force, etc.) nor of any 
nation should be distinguishable by external characteristics . Again, 
intelligence can be gained by study of the organization and procedure of 
radio networks and by use of radio direction-finding. In many cases, 
especially in Armed Forces communications, a skillful enemy can obtain 
valuable intelligence by collation of apparently uninformative message 
texts. It follows, therefore, that full communications security demands 
that special attention be paid in such matters as the judicious employment 
of indicators, the selection of call signs and of frequencies, radio 
procedures, and the restriction of the use of plain language messages and 
suppression of plain language chatter. 

3 
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GENERAL SECURITY CONSIDERATIONS 



I. PERSONNEL SECURITY AND TRAINING. 

1. In addition to the security of cryptographic systems themselves, 
the security of cryptographic personnel must be considered an essential 
part of cryptographic security. It is no use having a secure cryptosystem 
and special conditions of physical security if the personnel responsible 
for such tasks as the printing of documents and the typing of cryptographic 
instructions are not themselves completely secure. 

2. Personnel employed in communication security matters, and this 
includes cipher staffs, must be thoroughly investigated. Their instruc- 
tion must be as complete as possible; mistakes by cipher clerks, and 
even operators’ "chat", often result in compromise of security. 

3. In short, personnel must be guaranteed to be competent, loyal, 
and trustworthy. 

II. SECURITY OF CLASSIFIED MESSAGES BEFORE ENCIPHERMENT AND AFTER DECIPHERMENT. 

1. If security of classified messages is to be achieved, it is not 

enough to encrypt and transmit them securely. It is necessary to follow 
strictly the general security rules which apply to all classified 
documents, both before and after encryption. Special measures must be 
taken in the processing of messages, in their reproduction, distribution 
and storage. 
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2. Originators and addressees of messages must have impressed 
upon them the fact that their carelessness or indiscretion can result in 
compromise of not only message texts, but also, and as a consequence, 

on the cipher systems used to encipher the message texts. 

3. It is essential: 

a. To destroy carefully all rough drafts of messages, and all 
work sheets . 

b. To reduce to a minimum the number of people who handle a 
message between its origination and encipherment. 

c. To deliver message texts, before encipherment and after decipher- 
ment, securely wrapped and by safe hand. 

d. To use only cleared personnel for typing and otherwise 
processing message texts. 

e. To restrict the dissemination of the plain texts of encrypted 
messages to those who have need to know their content. 

f . To insure careful and secure storage of the plain texts of 
encrypted messages. 
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